Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
File:                     79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json)
Hash identifier:          UKLOu1NCNZVwz5t/1ccTpwUiHe8UWmdRFczD69J6luA=
Subject key identifier:   AE:EC:04:ED:B0:6B:64:B2:17:FC:7B:87:4E:DB:49:15:6F:04:A5:77
Certificate issuer:       /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial:       01D0
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 21:40:09 +0000
ROA not before:           Sun 02 Aug 2026 21:40:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141015
IP address blocks:        103.154.240.0/23 maxlen: 24
                          2407:e340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
        Validity
            Not Before: Aug  2 21:40:09 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6fb939-3717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:32:13:dd:57:65:42:4c:98:f6:ec:4f:b3:
                    2f:c4:97:8c:92:e4:55:d7:03:d3:76:33:3c:d6:9e:
                    c3:b9:b5:31:0f:00:77:50:2b:c8:3e:59:f1:cc:50:
                    e2:b9:bb:58:db:73:00:17:85:5b:7d:79:55:f1:b2:
                    9d:d9:0b:15:ee:63:e8:36:55:42:29:61:b0:f6:c6:
                    e6:24:9b:ac:4a:56:84:96:2f:5a:45:f0:79:dd:e1:
                    cb:b0:15:f0:4e:bc:d9:1a:27:d3:5d:03:c1:ad:9e:
                    3f:9d:06:f9:73:2f:3a:62:86:a9:c4:27:71:55:93:
                    f0:39:5e:0b:be:d3:36:18:74:0d:2d:31:65:2f:5b:
                    8d:b6:c9:74:ff:8b:b2:e6:f9:0d:bb:51:11:49:6a:
                    4a:73:f8:77:0b:91:23:20:62:a7:79:84:aa:78:5b:
                    b8:9b:fb:99:7f:f2:ee:ca:12:af:15:26:75:52:2c:
                    5a:0b:c4:66:94:bf:80:1c:ea:fe:57:dc:6c:8a:73:
                    55:3c:87:1f:db:92:eb:8a:cf:45:bb:a3:f3:ab:87:
                    99:2e:74:fb:04:8f:cc:ad:32:1b:12:9b:1d:92:fd:
                    b7:67:0b:10:ed:e0:e5:74:80:37:fa:66:07:23:bd:
                    95:71:93:ce:b9:fb:aa:48:92:f9:8a:ec:4d:5b:19:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EC:04:ED:B0:6B:64:B2:17:FC:7B:87:4E:DB:49:15:6F:04:A5:77
            X509v3 Authority Key Identifier:
                keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.240.0/23
                IPv6:
                  2407:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:53:84:bb:e4:62:a5:6f:8f:a5:e3:15:b8:5c:7d:de:7e:24:
         62:7a:33:e9:f5:98:4b:87:18:ba:4c:64:e1:d0:de:e1:b7:d9:
         d7:0f:34:31:ad:31:ae:2e:9a:af:3e:7d:46:63:2a:25:f5:aa:
         73:15:7a:ba:84:46:47:16:8a:59:7e:9c:71:8e:95:63:4f:cd:
         4f:3e:ae:9c:40:ec:79:cc:96:d3:95:c6:4b:f1:34:91:09:dc:
         51:93:fa:7a:b0:b8:71:71:1b:73:8b:21:fe:c3:cf:b8:05:68:
         1b:6e:0b:5f:ff:a0:66:19:50:05:a4:15:6d:9f:af:41:c9:dc:
         64:eb:2f:14:f9:87:75:50:85:b3:51:83:69:a3:0e:2b:d5:55:
         be:e3:7b:13:d5:4c:58:44:75:f9:fd:00:54:7c:98:f7:6f:b3:
         9c:c2:6f:ea:92:4e:59:3f:48:4a:de:ad:0d:b6:4c:2b:0d:65:
         4a:36:38:9a:c3:7a:f7:d0:16:24:92:49:ed:b1:2e:16:d4:74:
         d0:c0:a1:29:be:4f:a6:e4:ac:27:ea:dc:2e:af:0a:f6:c5:55:
         cb:a1:d0:96:ca:e5:53:65:c3:28:c8:e6:dc:05:b2:05:78:2c:
         33:d7:65:37:42:fb:85:41:2a:a9:6f:be:34:d4:50:45:b5:d3:
         8f:e8:f6:52
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw
QjYwMkMxQTQwHhcNMjYwODAyMjE0MDA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmYjkzOS0zNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmnkyE91XZUJMmPbsT7MvxJeMkuRV1wPTdjM81p7DubUxDwB3UCvIPlnxzFDi
ubtY23MAF4VbfXlV8bKd2QsV7mPoNlVCKWGw9sbmJJusSlaEli9aRfB53eHLsBXw
TrzZGifTXQPBrZ4/nQb5cy86YoapxCdxVZPwOV4LvtM2GHQNLTFlL1uNtsl0/4uy
5vkNu1ERSWpKc/h3C5EjIGKneYSqeFu4m/uZf/LuyhKvFSZ1UixaC8RmlL+AHOr+
V9xsinNVPIcf25Lris9Fu6Pzq4eZLnT7BI/MrTIbEpsdkv23ZwsQ7eDldIA3+mYH
I72VcZPOufuqSJL5iuxNWxngbwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFK7sBO2w
a2SyF/x7h07bSRVvBKV3MB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2
OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkU5RjQvM0Q2QkE1NzRGNjk2MTFFQTkzNDg2RjI1QzRGOUFFMDIvNzkwNTdFMUNF
QjEwMTFFRUI5Q0U0RjE5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5rwMA0EAgACMAcDBQAkB+NAMA0GCSqGSIb3DQEBCwUAA4IBAQB2
U4S75GKlb4+l4xW4XH3efiRiejPp9ZhLhxi6TGTh0N7ht9nXDzQxrTGuLpqvPn1G
Yyol9apzFXq6hEZHFopZfpxxjpVjT81PPq6cQOx5zJbTlcZL8TSRCdxRk/p6sLhx
cRtziyH+w8+4BWgbbgtf/6BmGVAFpBVtn69Bydxk6y8U+Yd1UIWzUYNpow4r1VW+
43sT1UxYRHX5/QBUfJj3b7Ocwm/qkk5ZP0hK3q0NtkwrDWVKNjiaw3r30BYkkknt
sS4W1HTQwKEpvk+m5Kwn6twurwr2xVXLodCWyuVTZcMoyObcBbIFeCwz12U3QvuF
QSqpb7401FBFtdOP6PZS
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:07 2026 by rpki-client